Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72415246-837f-36d9-92a5-9cab9542ff56.roa
File: 72415246-837f-36d9-92a5-9cab9542ff56.roa (raw, json)
Hash identifier: k1qAQzjpqlXOaGrJwp3GUpqbjsvd2Cvem+zx1XAltyw=
Subject key identifier: 34:B1:E0:AA:06:61:21:38:B6:9E:A4:28:E5:78:91:A1:E0:74:68:95
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D295E27C1F5871299D8FB40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72415246-837f-36d9-92a5-9cab9542ff56.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 184.150.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:5e:27:c1:f5:87:12:99:d8:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=8f87dda7-113c-4bca-a365-0e3ca48c58cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1d:22:ce:52:d2:c6:8a:f0:f6:ec:96:cf:4c:
33:d5:cf:9f:76:2d:dc:fa:cc:87:bd:7f:fc:84:bc:
f6:2c:05:20:e4:15:53:b2:a3:22:1f:c8:31:58:b0:
54:1b:fb:48:67:22:6f:42:da:0c:a0:3d:e2:6c:28:
66:3f:1e:4f:ed:c7:85:75:85:61:16:b5:40:ea:d1:
19:97:15:3a:9a:77:57:88:ce:72:e9:82:c4:61:25:
98:24:77:74:2f:41:b4:76:bc:d0:f5:69:db:19:f7:
7d:cc:19:08:80:21:1c:bc:43:4d:04:9a:67:22:d9:
37:08:8d:2c:6d:ba:e4:b0:12:a4:ff:55:d3:6e:bd:
3d:a5:5e:73:7a:66:11:28:d3:6e:f3:2c:8b:d9:0a:
93:c7:ff:43:89:4a:40:8c:33:64:cc:f9:98:4f:0a:
de:f6:cd:3b:11:c4:53:18:d4:40:65:4b:dc:6b:7d:
4d:f3:55:c5:c0:12:9c:96:f1:4f:99:22:1a:26:57:
5f:e9:9e:02:0c:0e:bc:7c:f7:61:b1:0b:65:90:b2:
65:2f:e5:8c:af:92:39:85:98:d4:b5:20:20:e9:1e:
31:17:6b:24:98:b4:c9:b5:65:d3:62:f1:37:ca:bf:
5e:40:30:f8:9f:66:59:39:27:bb:cd:02:38:89:4e:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B1:E0:AA:06:61:21:38:B6:9E:A4:28:E5:78:91:A1:E0:74:68:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/72415246-837f-36d9-92a5-9cab9542ff56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.150.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:fb:bc:d4:9c:d7:53:4b:4e:f8:dd:99:4e:21:04:31:9e:fb:
9d:24:8c:ee:5f:75:fb:b7:30:1f:8f:a1:25:02:c0:47:2f:58:
60:2f:44:48:6d:33:e9:e4:ea:e6:1c:59:5d:dc:b6:f9:18:c3:
1b:7c:d7:b2:5d:c3:1b:3f:f9:ad:47:98:f4:92:ad:76:d5:27:
b0:45:85:1c:79:f7:82:d3:ee:31:2b:89:4f:ad:aa:27:b7:d1:
6a:f9:01:38:a6:cc:5f:d3:90:62:61:1c:a2:30:a4:1e:71:b5:
aa:bd:f1:f2:ac:62:b8:c6:21:da:92:00:1f:69:0e:12:9e:ad:
5c:13:9d:2b:c5:cb:b5:04:33:3a:5f:99:47:1d:6a:76:4e:e0:
50:ac:74:e3:a5:af:5b:29:60:d9:aa:dc:fe:2a:c7:f2:ea:09:
73:54:4e:66:ce:e3:67:87:54:e3:b7:8f:15:e5:81:87:22:10:
8e:54:3b:ab:a6:a6:6f:d2:10:02:00:01:d6:5e:e2:33:05:54:
54:c9:81:c5:56:18:31:99:71:88:4c:8c:fd:c7:78:9b:89:79:
fe:b5:e7:b5:e2:f2:80:92:f0:14:bf:cb:d6:b7:d7:6e:66:8e:
13:7c:7c:69:b6:61:48:86:3d:f2:c8:89:0d:ea:9f:00:d0:87:
66:56:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:25 2025 by rpki-client